@team-agent/installer 0.5.84 → 0.5.86

package/crates/team-agent/src/lifecycle/launch/quick_start.rs

@@ -31,7 +31,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneField, PaneId, SessionName, Target, Transport, WindowName};
@@ -4434,7 +4433,7 @@ mod fresh_quick_start_leader_binding_tests {
 
 
     #[test]
-    fn invalid_pi_tool_category_is_rejected_before_runtime_persistence() {
+    fn pi_tool_category_is_transparently_accepted_by_compiler() {
         let root = std::env::temp_dir().join(format!(
             "ta-quick-start-pi-tools-{}-{}",
             std::process::id(),
@@ -4453,29 +4452,20 @@ mod fresh_quick_start_leader_binding_tests {
         )
         .unwrap();
 
-        let transport = crate::transport::test_support::OfflineTransport::new();
-        let mut discover = |_requested: &str| -> Result<Vec<String>, ()> { Err(()) };
-        let error = quick_start_with_transport_in_workspace_with_display_pi_preflight(
-            &root,
-            &team,
-            None,
-            true,
-            None,
-            &transport,
-            false,
-            &mut discover,
-        )
-        .expect_err("invalid Pi category must fail before quick-start persistence");
-        let error = error.to_string();
-        assert!(error.contains("Pi does not support Team Agent tool category \"provider_builtin\""));
-        assert!(error.contains("remove it from the role's tools"));
-        assert!(
-            !crate::state::persist::runtime_state_path(&root).exists(),
-            "quick-start validation failure must not persist runtime state"
-        );
+        let spec = crate::compiler::compile_team(&team)
+            .expect("tools metadata must be transparently accepted by the compiler");
+        let worker = spec
+            .get("agents")
+            .and_then(Value::as_list)
+            .and_then(|agents| {
+                agents.iter().find(|agent| {
+                    agent.get("id").and_then(Value::as_str) == Some("worker")
+                })
+            })
+            .expect("compiled spec must retain the worker role");
         assert!(
-            !root.join(".team/runtime").exists(),
-            "quick-start validation failure must not create runtime artifacts"
+            worker.get("tools").is_none(),
+            "tools metadata must not acquire runtime semantics"
         );
         let _ = std::fs::remove_dir_all(root);
     }

package/crates/team-agent/src/lifecycle/launch/quick_start_transport.rs

@@ -28,7 +28,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/readiness.rs

@@ -30,7 +30,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/spawn.rs

@@ -32,7 +32,6 @@ use crate::lifecycle::profile_launch::parse_provider;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};
@@ -123,11 +122,6 @@ pub(super) fn spawn_agents(
         )?;
         let system_prompt =
             crate::lifecycle::worker_command_context::compile_worker_system_prompt(&command_agent)?;
-        let tools = crate::lifecycle::worker_command_context::resolved_tool_strings_for_command(
-            &command_agent,
-            provider,
-        )?;
-        let resolved_tool_refs: Vec<&str> = tools.iter().map(String::as_str).collect();
         // 0.5.66 bypass 单源:per-agent safety 只服务 env 注入与审计,不参与 argv 决策。
         let safety = effective_runtime_config_for_worker_spawn(agent, provider)?;
         let mcp_team_id = runtime_team_key_for_spec(spec_path, spec, session_name);
@@ -168,7 +162,10 @@ pub(super) fn spawn_agents(
             mcp_config: Some(&mcp_config),
             system_prompt: Some(system_prompt.as_str()),
             model: command_model,
-            tools: &resolved_tool_refs,
+            dangerously_skip_permissions: matches!(
+                agent.get("dangerously_skip_permissions"),
+                Some(Value::Bool(true))
+            ),
             profile_launch: Some(&profile_launch),
             // Layer 1 self-healing (architect probe 2026-06-22): expose
             // agent_id as a display-name hint so Claude / Copilot
@@ -186,7 +183,6 @@ pub(super) fn spawn_agents(
                     model: command_model,
                     effort: agent_effort,
                     system_prompt: &system_prompt,
-                    tool_categories: &resolved_tool_refs,
                     team_mcp_tools: &["send_message", "report_result"],
                     mcp_config: &mcp_config,
                     session_scope: crate::lifecycle::launch::pi_mcp::PiSessionScope::Isolated,

package/crates/team-agent/src/lifecycle/launch/spec_state.rs

@@ -62,7 +62,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/state_projection.rs

@@ -37,7 +37,6 @@ use crate::lifecycle::profile_launch::parse_provider;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch/worker_env.rs

@@ -30,7 +30,6 @@ use std::process::Command;
 use crate::lifecycle::*;
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};

package/crates/team-agent/src/lifecycle/launch.rs

@@ -17,7 +17,6 @@ use std::process::Command;
 
 use crate::model::enums::{AuthMode, DisplayBackend, PaneLiveness, Provider, ProviderEffort};
 use crate::model::ids::AgentId;
-use crate::model::permissions::{self, AgentPermissionInput};
 use crate::model::yaml::{self, Value};
 use crate::state::persist::load_runtime_state;
 use crate::transport::{PaneId, SessionName, Target, Transport, WindowName};
@@ -133,13 +132,6 @@ pub fn launch_with_transport_in_workspace(
             session_name.as_str()
         )));
     }
-    let permissions = spec_agents(&spec)
-        .into_iter()
-        .map(|agent| PermissionSummary {
-            agent_id: agent,
-            raw: serde_json::json!({"source": "compiled_spec"}),
-        })
-        .collect::<Vec<_>>();
     let routes = spec_routes(&spec);
     let started = if dry_run {
         Vec::new()
@@ -208,7 +200,6 @@ pub fn launch_with_transport_in_workspace(
         dry_run,
         tmux_endpoint: transport.tmux_endpoint(),
         routes,
-        permissions,
         leader_receiver_attached: false,
         leader_bind_stage: None,
         leader_bind_reason: None,

package/crates/team-agent/src/lifecycle/profile_launch.rs

@@ -333,7 +333,7 @@ fn push_unique_path(paths: &mut Vec<PathBuf>, path: PathBuf) {
     }
 }
 
-fn parse_env_text(text: &str) -> BTreeMap<String, String> {
+pub(crate) fn parse_env_text(text: &str) -> BTreeMap<String, String> {
     let mut values = BTreeMap::new();
     for raw in text.lines() {
         let mut line = raw.trim();

package/crates/team-agent/src/lifecycle/restart/common.rs

@@ -301,11 +301,6 @@ pub(super) fn spawn_agent_window(
     )?;
     let system_prompt =
         crate::lifecycle::worker_command_context::compile_worker_system_prompt(&command_agent)?;
-    let tools = crate::lifecycle::worker_command_context::resolved_tool_strings_for_command(
-        &command_agent,
-        provider,
-    )?;
-    let resolved_tool_refs: Vec<&str> = tools.iter().map(String::as_str).collect();
     // owner_team_id resolution priority (Issue 2 fix):
     //   1. caller's explicit override (restart paths pass `selected.team_key`)
     //   2. agent row's persisted `owner_team_id` (set by prior launch/restart)
@@ -343,10 +338,11 @@ pub(super) fn spawn_agent_window(
     let mcp_config_path = if provider == crate::provider::Provider::Pi {
         None
     } else {
-        Some(crate::lifecycle::launch::write_worker_mcp_config(
+        Some(crate::lifecycle::launch::write_worker_mcp_config_for_provider(
             workspace,
             agent_id.as_str(),
             &mcp_config,
+            Some(provider),
         )?)
     };
     let profile_launch =
@@ -373,7 +369,10 @@ pub(super) fn spawn_agent_window(
         mcp_config: Some(&mcp_config),
         system_prompt: Some(system_prompt.as_str()),
         model: command_model,
-        tools: &resolved_tool_refs,
+        dangerously_skip_permissions: agent
+            .get("dangerously_skip_permissions")
+            .and_then(serde_json::Value::as_bool)
+            .unwrap_or(false),
         profile_launch: Some(&profile_launch),
         agent_id_hint: Some(agent_id.as_str()),
         effort: restart_effort,
@@ -398,7 +397,6 @@ pub(super) fn spawn_agent_window(
             model: command_model,
             effort: restart_effort,
             system_prompt: &system_prompt,
-            tool_categories: &resolved_tool_refs,
             team_mcp_tools: &["send_message", "report_result"],
             mcp_config: &mcp_config,
             session_scope: crate::lifecycle::launch::pi_mcp::PiSessionScope::Isolated,
@@ -743,7 +741,6 @@ fn merge_command_context_fields(
     };
     for field in [
         "role",
-        "tools",
         "system_prompt",
         "output_contract",
         "provider",

package/crates/team-agent/src/lifecycle/tests/claude_compatible_config_red.rs

@@ -97,15 +97,13 @@ fn managed_profile_command_plan_omits_mcp_config_even_when_mcp_config_is_availab
             }
         }),
     };
-    let tools = ["mcp_team"];
-
     let plan = get_adapter(Provider::Claude)
         .build_command_plan(ProviderCommandContext {
             auth_mode: AuthMode::CompatibleApi,
             mcp_config: Some(&config),
             system_prompt: Some("worker prompt requiring native MCP"),
             model: Some("profile-effective-haiku"),
-            tools: &tools,
+            dangerously_skip_permissions: false,
             profile_launch: Some(&profile),
             agent_id_hint: None,
             effort: None,

package/crates/team-agent/src/lifecycle/tests/clone_agent_preserves_source_tools.rs

@@ -1,9 +1,9 @@
 //! ---
-//! purpose: 回归——clone-agent 分身 tools 必须与源席集合相等，禁止静默夹成 leader 三件套
+//! purpose: 回归——clone-agent 分身保留源席 tools，编译 spec 不投影 tools
 //! contract:
 //!   provides:
 //!     - name: clone_agent_preserves_source_tools
-//!       what: 真跑 clone-agent 后，dynamic-role-files / runtime spec 与源席 tools 集合相等
+//!       what: 真跑 clone-agent 后，dynamic-role-files 保留源席 tools，runtime spec 不投影 tools
 //!   requires:
 //!     - name: source-six-set-vs-leader-three-set
 //!       what: 同一 team 里 leader 三件套 + 源席六件套的共享冲突面
@@ -275,6 +275,10 @@ fn role_tools(path: &Path) -> BTreeSet<String> {
         .collect()
 }
 
+fn set_of(items: &[&str]) -> BTreeSet<String> {
+    items.iter().map(|s| (*s).to_string()).collect()
+}
+
 fn load_runtime_spec(workspace: &Path) -> Value {
     let runtime = workspace.join(".team").join("runtime");
     let spec = std::fs::read_dir(&runtime)
@@ -287,17 +291,7 @@ fn load_runtime_spec(workspace: &Path) -> Value {
         .expect("parse spec")
 }
 
-fn yaml_tool_set(node: &Value) -> BTreeSet<String> {
-    node.get("tools")
-        .and_then(Value::as_list)
-        .unwrap_or_else(|| panic!("tools list missing"))
-        .iter()
-        .filter_map(Value::as_str)
-        .map(str::to_string)
-        .collect()
-}
-
-fn spec_tools(workspace: &Path, agent: &str) -> BTreeSet<String> {
+fn spec_projects_tools(workspace: &Path, agent: &str) -> bool {
     let parsed = load_runtime_spec(workspace);
     let agents = parsed
         .get("agents")
@@ -305,22 +299,18 @@ fn spec_tools(workspace: &Path, agent: &str) -> BTreeSet<String> {
         .expect("spec agents");
     for row in agents {
         if row.get("id").and_then(Value::as_str) == Some(agent) {
-            return yaml_tool_set(row);
+            return row.get("tools").is_some();
         }
     }
     panic!("agent {agent} missing from runtime spec");
 }
 
-fn leader_spec_tools(workspace: &Path) -> BTreeSet<String> {
-    yaml_tool_set(
-        load_runtime_spec(workspace)
-            .get("leader")
-            .expect("spec leader"),
-    )
-}
-
-fn set_of(items: &[&str]) -> BTreeSet<String> {
-    items.iter().map(|s| (*s).to_string()).collect()
+fn leader_spec_projects_tools(workspace: &Path) -> bool {
+    load_runtime_spec(workspace)
+        .get("leader")
+        .expect("spec leader")
+        .get("tools")
+        .is_some()
 }
 
 fn clone_ok(case: &Case, source: &str, dest: &str, phase: &str) {
@@ -347,7 +337,7 @@ fn clone_ok(case: &Case, source: &str, dest: &str, phase: &str) {
     );
 }
 
-/// clone 后分身 role + spec tools 必须等于源席；三件套源不得被扩成六件。
+/// clone 后分身 role 保留源席 tools；编译 spec 不投影 tools。
 #[test]
 fn clone_agent_preserves_source_tools() {
     let case = Case::start();
@@ -380,21 +370,18 @@ fn clone_agent_preserves_source_tools() {
         String::from_utf8_lossy(&qs.stdout)
     );
 
-    let source_spec = spec_tools(&case.workspace, SOURCE);
-    assert_eq!(
-        source_spec,
-        set_of(SIX),
-        "fixture source must be the six-set"
+    assert!(
+        !spec_projects_tools(&case.workspace, SOURCE),
+        "compiled source spec must not project tools metadata"
     );
-    let leader_spec = leader_spec_tools(&case.workspace);
-    assert_eq!(
-        leader_spec,
-        set_of(THREE),
-        "leader must stay the three-set ceiling so the conflict surface exists; leader={leader_spec:?}"
+    assert!(
+        !leader_spec_projects_tools(&case.workspace),
+        "compiled leader spec must not project tools metadata"
     );
 
     clone_ok(&case, SOURCE, CLONE, "first_clone");
 
+    let source_role = role_tools(&case.workspace.join("agents").join(format!("{SOURCE}.md")));
     let clone_role = role_tools(
         &case
             .workspace
@@ -402,23 +389,32 @@ fn clone_agent_preserves_source_tools() {
             .join("dynamic-role-files")
             .join(format!("{CLONE}.md")),
     );
-    let clone_spec = spec_tools(&case.workspace, CLONE);
     assert_eq!(
-        clone_role, source_spec,
-        "clone role tools must equal source; source={source_spec:?} clone={clone_role:?}"
+        clone_role, source_role,
+        "clone role tools must equal source; source={source_role:?} clone={clone_role:?}"
     );
-    assert_eq!(
-        clone_spec, source_spec,
-        "clone spec tools must equal source; source={source_spec:?} spec={clone_spec:?}"
+    assert!(
+        !spec_projects_tools(&case.workspace, CLONE),
+        "compiled clone spec must not project tools metadata"
     );
 
-    let narrow_src = spec_tools(&case.workspace, NARROW);
-    assert_eq!(narrow_src, set_of(THREE), "narrow source fixture");
+    let narrow_source_role = role_tools(&case.workspace.join("agents").join(format!("{NARROW}.md")));
+    assert_eq!(narrow_source_role, set_of(THREE), "narrow source fixture");
     clone_ok(&case, NARROW, NARROW_CLONE, "second_clone");
-    let narrow_clone = spec_tools(&case.workspace, NARROW_CLONE);
+    let narrow_clone_role = role_tools(
+        &case
+            .workspace
+            .join(".team")
+            .join("dynamic-role-files")
+            .join(format!("{NARROW_CLONE}.md")),
+    );
     assert_eq!(
-        narrow_clone, narrow_src,
-        "narrow clone must keep the three-set (preserve, do not widen); got={narrow_clone:?}"
+        narrow_clone_role, narrow_source_role,
+        "narrow clone role must keep the three-set (preserve, do not widen); got={narrow_clone_role:?}"
+    );
+    assert!(
+        !spec_projects_tools(&case.workspace, NARROW_CLONE),
+        "compiled narrow clone spec must not project tools metadata"
     );
 
     case.shutdown();